Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
2a04:c300:c00::3da has been reported 250
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
[MonAug0307:28:22.9277152026][security2:error][pid3076948:tid3076976][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp ...
show more[MonAug0307:28:22.9277152026][security2:error][pid3076948:tid3076976][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp\)\|dict\|expect\|\(\?:ht\|f\)tps\?\)://\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"522\"][id\"340165\"][rev\"292\"][msg\"Atomicorp.comWAFRules:UniencodedpossibleRemoteFileInjectionattemptinURI\(AE\)\"][data\"/\?\\\\xaddallow_url_include=1\\\\xaddauto_prepend_file=php://input\"][severity\"CRITICAL\"][hostname\"ipv6.swisservers.com\"][uri\"/\"][unique_id\"anAm9tUt5iEhhrzTZuTUiAAAAUw\"]
show less
[SatAug0114:52:10.7820682026][security2:error][pid1512908:tid1513035][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp ...
show more[SatAug0114:52:10.7820682026][security2:error][pid1512908:tid1513035][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp\)\|dict\|expect\|\(\?:ht\|f\)tps\?\)://\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"522\"][id\"340165\"][rev\"292\"][msg\"Atomicorp.comWAFRules:UniencodedpossibleRemoteFileInjectionattemptinURI\(AE\)\"][data\"/\?\\\\xaddallow_url_include=1\\\\xaddauto_prepend_file=php://input\"][severity\"CRITICAL\"][hostname\"mail.cmsolution.ch\"][uri\"/\"][unique_id\"am3r-n-IWY4p_jTu7sgZMQAAANc\"]
show less
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /_next
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])
This report was gene ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /_next
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
[FriJul3112:03:16.9473842026][security2:error][pid13988:tid14024][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp\)\| ...
show more[FriJul3112:03:16.9473842026][security2:error][pid13988:tid14024][client2a04:c300:c00::3da:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"=\(\?:ogg\|tls\|ssl\|gopher\|file\|data\|php\|zlib\|zip\|glob\|s3\|phar\|rar\|s\(\?:sh2\?\|cp\)\|dict\|expect\|\(\?:ht\|f\)tps\?\)://\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"522\"][id\"340165\"][rev\"292\"][msg\"Atomicorp.comWAFRules:UniencodedpossibleRemoteFileInjectionattemptinURI\(AE\)\"][data\"/\?\\\\xaddallow_url_include=1\\\\xaddauto_prepend_file=php://input\"][severity\"CRITICAL\"][hostname\"newbeauty-pully.ch\"][uri\"/\"][unique_id\"amxy5Mz2wmHD-4VTiGFg_wAAAA4\"]
show less